# Aembit Secrets Operator now available

**Aembit Secrets Operator 1.31.298** is now available.

[Secrets Operator](/user-guide/deploy-install/kubernetes/aso/) is a Kubernetes operator that authenticates to the Aembit platform and synchronizes credentials into Kubernetes Secrets. Applications consume managed secrets the same way they consume any other Kubernetes Secret.

Key capabilities in this release:

* **Kubernetes Service Account authentication**: Authenticate using the operator’s in-cluster ServiceAccount token, validated against the cluster’s OIDC endpoint. No per-cluster signing key required. Verified on Amazon EKS and K3s. See [Set up Secrets Operator](/user-guide/deploy-install/kubernetes/aso/setup/) for configuration.
* **OIDC symmetric key authentication**: Alternatively, authenticate using OIDC tokens with symmetric key signing (HS256) for custom claims and non-Kubernetes identity scenarios.
* **Proactive credential renewal**: Credentials refresh at 80% of their TTL, or sooner when you configure a shorter `refreshInterval`, ensuring applications always have a valid credential.
* **Multi-namespace install**: You can now use the same Helm release name across multiple namespaces on the same cluster without resource name conflicts.